Windows Forum

Ask something
Discussion Locked

What is causing disk activity when PC is

0 helpful
17 replies

by jrcohen

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I often hear hard disk activity when my computer is just sitting idle. I want to know which program(s) are reading/writing to my disk. My reasons for wanting to know include making sure that no unauthorized program is running, excluding unneeded programs from startup to free up memory and cpu, and to understand more about my PC and the programs/processes that run in "background".

I'd like a utility program that will display useful information about the program/process that is doing the disk read/write and display this as the activity occurs. If you know of such a utility program, please communicate to me the name of the software and the name of the software's publisher.

Thank you.

Jeff Cohen
jrcohen@swbell.net

17 replies

by cg it

First off, tell us what O/S your running. W2K has a task manager you can pop up via CTL+ALT+DEL and view running processes. Win 9X (ME also) has a running tasks program you can use to view what's going on.

by jrcohen

I run Windows 98. I am aware of your suggested approach. But I need something that is more specific. I need to know the exact program name that is doing the disk read/write at the moment it occurs. This might be an executable, a .dll, or ?

by shiny_topadm

Hi Jeff
In addition to an application running "in the background", there also is a process called "disk caching" going on. This is done by the operating system and probably accounts for a lot of the "normal" disk activity that you observe. The o/s reads disk sectors into RAM to speedup the overall functioning of your computer. If the "data" is changed, some writing (to disk) occurs, but not necessarily instantly after the program gave the instruction. Even if the data isn't used aftersome time, the system will read more sectors. It's important to remember that the harddrive is really a storage device, and the system runs whatever instructions are in [a limited amount of] memory. hope this helps,

---Will

by jrcohen

This is useful background information, because if I see a program whose name is smartdrv.dll or cachemgr.dll (names I just made up). I have a clue to what it may be doing. However, you did not offer me the name of a real-time disk activity monitor.
In the mean-time, I have found several, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by jrcohen

I certainly appreciated you response, however I had already done this.

In the mean-time, I have found several programs, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity onyour computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by thechas

The list of running processes (some even hidden from task manager) that access the HDD is large.

Windows regulary checks the links to all the files in the recent documnets list.

Screen savers

Windows refresh of the desktop

Windows refresh of virtual memory (disk cache or swap file)

I can get a fairly detailed snapshot of what is going on on my system with Fix-It Suite. This used to be from On-Track, and is now handled by a new firm who's name slips my mind.

I believe there isa similar tool in Norton Utilities or SystemWorks.

There are a few freeware utilities that can provide more information also. Choose the one that looks best to you from;
www.completelyfreesoftware.com
www.nonags.com
www.download.com

Chas

by jrcohen

Your information regarding possible background processes was helpful.
In the mean-time, I have found several utilities, which do more than list the current processes, which I'll pass on to you.

1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 byPrudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program isunregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by georgemcd

Check to see if you have findfast installed Microsoft msworks and word puts it in to disable it just press crtl alt del

by jrcohen

I appreciate the suggestion, but I had already done this. And my main objective ws to find a real-time disk activity monitor.

In the mean-time, I have found several, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by chris willhoite

Most virus scaners will also have a feature that scans your computer in the background while the screen saver is running.

by jrcohen

I appreciate your response, but I was really looking for a real-time disk activity monitor.

In the mean-time, I have found several, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file systemactivity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by angsax

Quite a selection of answers here. Another is to check your cache/swap file/page file. Do you have one and is it (approx) 2x your memory. Also, is there sufficient hard drive space (more than 100 meg minimum.

by jrcohen

Thank you for your suggestion. However I still wanted to find a real-time disk activity monitor.

In the mean-time, I have found several, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The informationis very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

by jrcohen

Thank you for the suggestion. However I still wanted to find a real-time disk activity monitor.

In the mean-time, I have found several, which I'll pass on to you.
1. Opentrap.exe "OpenTrap is a 32-bit Windows 95 application that monitors file system activity on your computer. OpenTrap is not designed for and will not run under either Windows 3.1 or Windows NT (any version). OpenTrap version 1.2 Copyright ? 1997 Ziff-Davis Publishing."
Opentrap is peculiar in that it will record disk activity, but will not display it until you stop logging. Here is an example of its output:

000002 Qvp32 closed a file on drive C: at 10:14:40.490
000003 KERNEL32 closed a file on drive C: at 10:14:43.950
.....
000023 MSGSRV32 closed C:\WINDOWS\USER.DAT at 10:14:56.580
000024 Qvp32 opened C:\MOUSE\SYSTEM\CCMSGHK.DLL at 10:15:21.630

It appears that this utility has been removed from the Ziff-Davis download site, probably because of its age.

2. ExeSpy 98 by Prudens (http://www.spywindows.com/)This is a real-time monitor that shows in columns the OS, Result, Function Called, Caller, and Parameters. Spywindows makes utilities for professionals. I am unable to show you sample output, because my program is unregistered. The information is very detailed. Single-user cost is around $200 for W98/ME, $300 for WinXP

This discussion is closed to new replies.